cube-js/cube
Cube API and Refresh Worker use Instance Metadata for AWS Credentials like Cube Store does
オープン
#4,334 opened on 2022/04/06
help wanted
Repository metrics
- Stars
- (19,563 個のスター)
- PR merge metrics
- (PR metrics pending)
説明
Right now it doesn't appear that the Cube API or Refresh Worker is capable of using AWS Instance Metadata to authenticate with AWS. However, the Cube Store containers already have this capability.
From a security and configuration management perspective, Role Based Access is greatly preferred over passing in long-term access credentials to the containers with environment variables. Is this already on the road map?
This would be very useful when using the CUBEJS_DB_EXPORT_BUCKET configuration.